Spring AI Vector Store - Milvus
78%
Total Score
healthy
Healthy, backed by active maintenance; milestone status and workflow hygiene gaps are the main caveats.
Recent issue and pull-request creation is substantial, with 57 new issues and 82 new pull requests in one month, though only 7 pull requests were merged; this suggests some review backlog rather than abandonment.
The project uses Maven, but the collected repository tooling reports no security-scanning tools, leaving a modest transparency and defense-in-depth gap.
This release is a milestone prerelease and 40% of recent versions are prereleases, which increases change risk despite the stable major line and active release history.
All 17 workflows were analyzed, but 26 high-confidence findings include template injection and floating latest container images; 78 of 88 action references are unpinned. No untrusted checkout or script-injection trigger was reported, so this is workflow hygiene risk rather than a severe release blocker.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10801 spring-ai-milvus-store is vulnerable to Improper Input Validation in versions 1.1.0 - 1.1.5 and 1.0.0 - 1.0.6. | 1.0.0 - 1.0.61.1.0 - 1.1.5 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.springframework.ai:spring-ai-vector-store Version 2.1.0-M1 | — | — |
io.milvus:milvus-sdk-java Version 2.6.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.